Item.validate_name should be a class method
add User.validate_name
allow specifying a plaintext password